CVE-2005-1338
Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext.
Date published : 2005-05-04
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html